openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38438.rst
Major Hayden bfcf6c7423 Initial import of openstack-ansible-security role 
This role contains around 150 controls from the 270+ controls that exist
in the RHEL 6 STIG. New controls are still being added.

Implements: blueprint security-hardening

Change-Id: I0578f86bf42d55242bc72b97b40a5935a3cb18d6
2015-10-07 07:27:39 -05:00

377 B
Raw Blame History

Exception

Adjusting the bootloader configuration can cause issues with reboots and this work is left up to the deployer. Enabling auditing at boot time is helpful, but the risk may not be worth the change in most environments.

The auditd process starts very early during the boot process to catch events already, and this should be sufficient for most environments.